Bug#481970: libpam-pgsql: while in authentication phase induces success, may circumvent sudo et al.

2008-05-19 Thread Julian Mehnle
Package: libpam-pgsql Version: 0.6.3-1 Severity: critical Tags: security Justification: root security hole I recently upgraded libpam-pgsql to 0.6.3-1. I now noticed that pressing during libpam-pgsql's authentication phase, e.g., when sudo is asking for the user's password, erroneously causes su

Bug#306875: spfquery: Support for alternatives system

2006-12-02 Thread Julian Mehnle
Package: spfquery Version: 1.2.5-4 Followup-For: Bug #306875 Here's a patch that installs the `spfquery` executable as `spfquery. libspf2` and adds update-alternatives support for it. diff -ruN libspf2-1.2.5.org/debian/compat libspf2-1.2.5/debian/compat --- libspf2-1.2.5.org/debian/compat 1970